Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
File:                     F6386FABEA39210B665A6A55AE5DA66BE6741597.cer (raw, json)
Hash identifier:          gLExF/X7LsDVHoOOXAJP+d/t2H8Yr0hFBnchVu9iRfc=
Subject key identifier:   F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       7D3A4D1EBEBD726BFDA30550F6272BE04662B8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
CRL Distribution Point:   rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Wed 04 Nov 2026 03:49:03 +0000
Certificate not after:    Wed 03 Nov 2027 03:54:03 +0000
Subordinate resources:    IP: 85.155.229.0/24
                          IP: 136.148.70.0/24
                          IP: 2a05:dfc4::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:4d:1e:be:bd:72:6b:fd:a3:05:50:f6:27:2b:e0:46:62:b8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov  4 03:49:03 2026 GMT
            Not After : Nov  3 03:54:03 2027 GMT
        Subject: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:60:1b:4e:8b:c7:a5:67:54:1b:60:63:77:
                    b1:06:6f:20:8b:e9:d7:d4:54:e5:f6:08:95:35:f9:
                    6b:f2:2c:be:1f:2e:7d:5b:8d:62:4c:46:09:6f:39:
                    c8:d9:7c:f3:e0:66:39:56:b9:9b:3f:b5:5f:73:ae:
                    9a:b5:8c:d1:17:1d:c9:05:1a:36:12:cd:4d:aa:35:
                    70:9c:0a:eb:71:32:6d:d2:02:b2:38:38:38:9a:0a:
                    ff:fa:b1:69:14:42:c2:0c:ea:d6:bd:e2:1f:09:00:
                    8b:dd:8f:9f:d8:11:00:37:9b:d6:b8:9a:ab:c6:20:
                    c9:0a:7c:a7:3c:65:43:97:e3:31:69:39:b8:dc:2b:
                    8a:22:48:f2:d0:f4:ab:37:f9:49:c5:00:f5:06:17:
                    74:84:90:6f:57:b1:14:f3:7c:28:77:d1:7b:d5:df:
                    b9:68:b9:ba:54:39:2f:13:f0:8b:76:b4:af:d7:2c:
                    86:56:83:c7:6c:3c:84:a1:45:6f:09:65:1a:54:8a:
                    0f:4b:fc:55:c5:d6:da:02:7e:cb:3c:ef:36:76:55:
                    59:b3:d9:60:83:9b:00:5e:a3:e8:27:7a:5c:aa:e5:
                    b3:79:32:c3:2b:36:0d:56:4b:a1:02:61:9b:3a:c7:
                    b1:9c:48:85:61:69:8f:d0:ea:fb:4f:3d:1c:d7:ca:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.229.0/24
                  136.148.70.0/24
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:70:25:6d:af:64:2c:e3:10:85:21:90:92:10:2d:93:47:8b:
         80:96:38:f5:e4:17:de:43:b0:f6:77:84:55:82:55:72:a9:cb:
         f5:fe:c4:cd:fb:af:58:e4:7e:bc:50:88:39:6e:07:e8:81:4b:
         f2:71:86:5e:66:93:f8:db:ad:c6:fb:9a:57:50:65:2d:59:0c:
         b0:81:78:d3:28:9d:d0:40:f2:c8:b0:91:5f:b3:c1:38:05:5c:
         f0:6d:3a:5b:dc:fb:2c:53:83:00:05:84:1b:35:e6:b7:96:ba:
         b9:92:32:9a:76:bb:16:a1:47:46:0f:90:78:d6:ca:a2:36:6f:
         02:48:28:0a:a2:05:c2:33:73:3b:ab:ec:20:db:eb:79:5e:14:
         6d:0c:a2:82:94:1d:0d:f3:e5:5a:e5:62:17:2a:19:31:97:0a:
         37:b9:51:3e:74:8d:04:68:40:28:24:0b:6d:5d:ff:eb:f4:ed:
         2a:0d:e9:47:a3:4d:05:4a:fd:a9:40:3d:b9:0e:d8:75:0e:81:
         35:e6:c8:f5:58:76:1e:07:f5:b6:14:62:a6:8c:8e:10:2f:09:
         3a:3d:a5:c4:93:c7:5d:af:f9:d3:51:25:55:70:eb:84:83:a3:
         71:1d:8a:a4:1c:fd:b4:b3:33:50:4c:37:8c:4c:4a:31:55:13:
         14:17:14:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:36:14 2026 by rpki-client